DPDP Rules: 13 November 2026 ko kya shuru hota hai, aur small business ke liye kaun si date zyada zaroori hai

India ka data protection law steps me aa raha hai, aur agla step 13 November 2026 ko hai. Is date ki charcha ho rahi hai, lekin zyadatar small businesses ke liye ek baad ki date zyada zaroori hai. Is update me dono samjhaye gaye hain, aur ye bhi ki agar aap customer details rakhte hain ya unke saath AI tools use karte hain to kya taiyaari karein.

Ye taiyaari me help ke liye general jaankari hai. Ye legal advice nahi hai. Law aapke business par kaise lagu hota hai, ye apne lawyer, CA ya adviser se poochiye.

Kya hua: DPDP ka timetable

Government of India ne Digital Personal Data Protection (DPDP) Rules, 2025 November 2025 ke beech me notify kiye. 2023 ke DPDP Act ke saath milkar ye batate hain ki organisations ko logon ka digital personal data kaise sambhalna hai. Government ke note ke hisab se Rules phased compliance ke liye atharah month ka time dete hain.

Neeche ke timetable me law firm Hogan Lovells ki publish ki hui dates hain, jo 13 November 2025 se ginti karti hai. Government ke apne note me Rules notify hone ka din 14 November 2025 likha hai. Ek din ke fark se aapko jo karna hai wo nahi badalta.

Consent Manager, government ke shabdon me, aisi entity hai jo logon ko ek platform deti hai jahan wo apna consent de, manage, review ya wapas le sakein. Note kehta hai ki Consent Managers India me based companies honi chahiye.

Small business ke liye ye kyun zaroori hai

November wali date news me rahegi, lekin wo ek nayi tarah ki company ke baare me hai, aapki dukaan ya office ke baare me nahi. Zyadatar businesses ke liye practical deadline 13 May 2027 hai, yaani ab se lagbhag saat month.

Do facts ki wajah se jaldi taiyaari karna theek hai:

• Law ki definition badi hai. "Data Fiduciary" wo entity hai jo decide karti hai ki personal data kyun aur kaise process hoga. Jo business customers ke naam, phone number ya address digital form me rakhta hai aur decide karta hai ki unka use kaise hoga, wo is description me aata hai. Government ke note me hume aisa kuch nahi mila jo small businesses ko chhoot deta ho, isliye ye point apne adviser se check karein.
• Penalties badi hain. Government ke note me reasonable security safeguards na rakhne par ₹250 crore tak, breach ke baare me Board ya affected logon ko na batane par ya bachchon ke data wali duties todne par ₹200 crore tak, aur doosre violations par ₹50 crore tak ki penalty likhi hai.

Kise dhyan dena chahiye

• Har wo business jiski customer list phone, spreadsheet, CRM, billing software ya WhatsApp me hai.
• Online sellers, aur jo bhi website ya form se details lete hain.
• Wo businesses jinki team customer details AI tools me paste karti hai.
• Jo bhi bachchon ka data sambhalta hai: note kehta hai ki parent ya guardian ka verifiable consent chahiye, siwaye tab jab processing healthcare, education ya real-time safety jaisi essential services se judi ho.

13 May 2027 se aapke business me kya badalta hai

Government ke note ke shabdon me:

1. Saaf notice. Har Data Fiduciary ko ek alag consent notice dena hoga jo samajhne me aasan ho aur bataye ki personal data kis specific purpose ke liye liya aur use kiya ja raha hai.
2. Consent wapas liya ja sakta hai, kabhi bhi.
3. Security. Personal data ko safe rakhne ke liye reasonable safeguards.
4. Breaches. Affected logon ko bina der kiye, simple language me batana hoga: kya hua, kya asar ho sakta hai, kya steps liye gaye, aur kisse contact karein.
5. Contact point. Personal data ke questions ke liye saaf contact information dikhani hogi.
6. Requests. Log apna data dekhne, correct karne, update karne ya kuch situations me erase karne ko keh sakte hain. Aisi requests ka reply nabbe din ke andar dena hoga.

13 November 2026 ke baad registered Consent Managers aana shuru ho sakte hain. Time ke saath kuch customers unke through consent de aur wapas le sakte hain. Kisi ordinary business ko khud Consent Manager banna zaroori nahi hai.

DPDP aur AI tools

Jab aapki team ka koi person kisi customer ka naam, number ya complaint AI assistant me paste karta hai, to wo jaankari aapke business se nikal kar doosri company ke paas jati hai. Government ka note kehta hai ki personal data ke use ke liye Data Fiduciaries hi accountable rehte hain. Use AI tool me bhejne se ye zimmedari kisi aur ki nahi ho jati.

Yahan do guides kaam aati hain: customer data, privacy aur AI tools aur team ke liye simple AI rules.

Small business ke liye DPDP checklist: abhi kya karein

1. Jo personal data aap rakhte hain uski list banaiye, aur ye bhi ki wo kahan hai: phones, spreadsheets, CRM, billing software, WhatsApp, AI tools.
2. Har ek ke saamne wajah likhiye. Jiski ab zaroorat nahi, use delete karein.
3. Ek simple notice draft karein: aap kya lete hain, kyun, aapse contact kaise karein, aur consent wapas kaise lein. Ye forms, website aur WhatsApp par chahiye hoga.
4. Ek person tay karein jo personal data ki requests ka reply dega, aur nabbe din ki limit note karein.
5. Basics mazboot karein: strong passwords, two-step login, aur jo log ja chuke hain unka access hatana.
6. AI tools ke liye team rule banaiye: customer ka personal data AI tool me tabhi jaye jab task ko uski zaroorat ho aur tool approved ho.
7. Apne software providers se poochiye (CRM, billing, WhatsApp, website) ki wo kya badal rahe hain, aur May 2027 se pehle apne adviser se notice review karwaiye.

Aage kya dekhna hai

• 13 November 2026 ke baad pehle registered Consent Managers.
• Data Protection Board ka kaam shuru hona. Government ka note kehta hai ki isme chaar members honge aur ye digital tareeke se kaam karega, complaints online file hongi.
• Small businesses ke liye likhi gayi koi guidance.
• 13 May 2027.

Pakka nahi ki AI aapke business me kahan fit hota hai? Free AI Business Checkup lagbhag teen minute leta hai.